ParseCSV

This script will parse a CSV file and place the unique IPs, Domains and Hashes into the context.

Script Data


NameDescription
Script Typepython2
Tagsfile, csv, Utility

Used In


This script is used in the following playbooks and scripts.

  • Block IOCs from CSV - External Dynamic List

Inputs


Argument NameDescription
entryIDThe war room entryID of the file.
fileThe name of the file. The file must be uploaded to the War Room.
ipsThe column number that contains IP Addresses. (First column is column 0)
domainsThe column number that contains domains. (First column is column 0)
hashesThe column number that contains file hashes. (First column is column 0)
parseAllParses and converts all of the rows in the CSV into JSON and puts them into the context.
codecThe codec type used to parse the file. (some character sets are not UTF-8 supported)

Outputs


PathDescriptionType
IP.AddressIP address found in the parsed file.Unknown
Domain.NameDomain found in the parsed file.Unknown
File.MD5MD5 found in the parsed file.Unknown
File.SHA1SHA1 found in the parsed file.Unknown
File.SHA256SHA256 found in the parsed file.Unknown
ParseCSV.ParsedCSVParsed csv in the form of JSON array.Unknown